CVE-2008-4951
Severity CVSS v4.0:
Pending analysis
Type:
CWE-59
Link Following
Publication date:
05/11/2008
Last modified:
08/08/2017
Description
dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts.
Impact
Base Score 2.0
6.90
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:gplhost:dtc-common:0.29.6:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page